Privacy Policy

1. Who we are

AxelHired is a job-application automation product operated by Sharpe Holdings Private Limited (CIN: U64990DL2026PTC465891; PAN: ABTCS5673C), a private limited company incorporated on 24 April 2026 under the Companies Act, 2013, with its registered office at 440-A, 4th Floor, 12, Ajit Singh House, Yusuf Sarai C, Green Park, New Delhi, South West Delhi — 110016, India. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and process personal data of users (Data Principals) who sign up to use our service.

2. Data we collect

• Identifiers you provide: name, email, phone, LinkedIn URL.
• Profile data: résumé PDF, current and expected CTC, notice period, work eligibility, location.
• Job-board credentials (Naukri, LinkedIn, etc.) you choose to add to the Vault: encrypted at rest using AES-256-GCM with a master key stored outside the database.
• Application history: jobs you applied to, status, screenshots of the confirmation page.
• Operational telemetry: error logs and request traces, scrubbed of personal identifiers where possible.

3. Purpose and lawful basis

We process the data above with your explicit consent under §6 of the DPDP Act, for the sole purpose of operating the application-automation service you signed up for. We do not sell your data, share it with advertisers, or use it to train machine-learning models that operate outside your account. You may withdraw any consent at any time from Settings → Privacy; withdrawal is as easy as the original grant (one toggle per processing purpose) and we cease the relevant processing within 24 hours.

4. Where your data is stored

All personal data lives in Supabase Mumbai (ap-south-1). Backups remain within the same region. Worker compute that drives the browser submissions runs on Hetzner cloud servers.

5. Third-party processors

• Firebase Authentication: sign-in identity.
• Razorpay: payment processing.
• Google Cloud (Gmail API): only with your OAuth grant, only to read OTP emails during apply.
• Vercel AI Gateway: large-language-model calls for résumé tailoring and screening-question answers. We route only through providers and models for which Zero Data Retention has been confirmed by the provider (currently OpenAI and Anthropic). Inputs are limited to the specific résumé block + job description; we do not send your raw résumé file.

6. Chrome extension

Our optional Chrome extension activates only on job-board domains you visit (LinkedIn, Naukri, Workday-hosted career sites, Greenhouse, Lever, Ashby, etc.). It reads the page DOM to detect “Apply” buttons and the job description, and posts that to axelhired.com over HTTPS using your authenticated session, never to a third party. It does not read content on unrelated sites, does not log your browsing history, and does not access cookies or passwords on the sites it activates on. You can disable or uninstall the extension at any time from chrome://extensions; doing so does not affect your account.

7. Your rights (DPDP §11)

• Access: see every piece of data we hold about you at /dashboard/settings/account.
• Correction: edit profile fields any time from settings.
• Erasure: delete your account from settings. We purge personal data within 30 days of the deletion request; backups containing the data are purged on the next backup rotation cycle, which completes within 90 days.
• Grievance: write to privacy@axelhired.com within 30 days for any DPDP complaint.
• Nominate a Consent Manager: supported when one is operational under the DPDP framework.

8. Retention

Active accounts: data retained as long as the account exists. Inactive accounts (no login for 18 months): we email you 30 days before purging. Deleted accounts: personal data purged within 30 days; backups containing the data are purged on the next backup rotation cycle (within 90 days). Aggregated analytics (no PII) may be retained.

9. Security

Row-Level Security on every PII table, AES-256-GCM envelope encryption for credentials, audited service-role access for system writes only, TLS in transit, and per-incident postmortems published when appropriate. We commit to notifying you and the Data Protection Board of India without undue delay, and in any event in accordance with applicable rules under the DPDP Act, of any confirmed personal-data breach affecting your account.

10. Children

AxelHired is intended for users 18 years or older. Under §9 of the DPDP Act, 2023, we do not knowingly process personal data of children (persons under 18) without verifiable consent of their lawful guardian. If you believe a person under 18 has signed up, contact grievance@axelhired.com and we will delete the account.

11. Changes to this policy

We will email registered users 14 days before any material change to this policy.

12. Grievance Officer

In line with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Rule 4(3) of the Consumer Protection (E-Commerce) Rules, 2020:

• Name: Manan Jain
• Designation: Grievance Officer & Designated Contact for DPDP queries
• Email: grievance@axelhired.com
• WhatsApp / Phone: +91 89020 81121 (Mon-Fri, 10:00-18:00 IST)
• Postal: Sharpe Holdings Private Limited, 440-A, 4th Floor, 12, Ajit Singh House, Yusuf Sarai C, Green Park, New Delhi, South West Delhi — 110016, India

We acknowledge all grievances within 24 hours and resolve them within 15 days as required under the IT Rules, 2021, and within the 48-hour / 30-day timelines required under the Consumer Protection (E-Commerce) Rules, 2020.